This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File:                     y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier:          60NrqMcQMxSwbWWldyS5HrcaIyPv9ioAXMvqjWsz8BQ=
Subject key identifier:   78:93:AF:06:11:6B:E7:18:59:77:B0:E4:2C:C3:53:84:43:58:EB:47
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer:       /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial:       019AF12DD7A8A5F2D6947D76633E63B57682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number:          0F6E
Signing time:             Sat 06 Dec 2025 01:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:44 +0000
Files and hashes:         1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
                          2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
                          3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
                          4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: 4TuXUOfYUWBI+I/G22mlQgY4w2EPe4CY4pqxvu10Q1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:d7:a8:a5:f2:d6:94:7d:76:63:3e:63:b5:76:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
        Validity
            Not Before: Dec  6 01:01:44 2025 GMT
            Not After : Dec  7 01:01:44 2025 GMT
        Subject: CN=7893af06116be7185977b0e42cc353844358eb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:ea:f9:c6:a5:e4:a2:57:20:53:76:19:c6:
                    e3:50:c4:16:39:2a:69:cc:52:c3:90:47:01:90:c8:
                    4d:5e:4f:00:e7:5e:5e:7a:20:4a:e6:27:b8:71:1a:
                    66:fa:f9:2c:1c:90:f4:b1:fd:ab:85:ab:e8:bc:c5:
                    7e:4f:81:0f:13:3d:94:63:72:b9:12:be:8a:b7:8e:
                    9c:cc:6b:34:48:4f:64:b5:ea:64:2c:f4:e9:33:64:
                    a1:e2:89:5a:22:a8:f9:f2:a9:27:ef:95:37:de:9b:
                    2d:13:9c:79:23:59:14:85:7e:9e:17:ae:ce:4e:3e:
                    d0:7c:a0:9d:c3:a8:7a:80:e4:dd:9c:fc:dc:46:7a:
                    62:5d:cb:70:b6:f0:8b:54:db:db:be:a5:98:9e:ef:
                    ac:33:dd:a0:dc:81:88:26:96:95:82:c0:19:ad:d6:
                    57:49:52:2c:11:73:29:cb:1a:37:bd:5a:5e:28:bd:
                    ff:13:1f:fe:b8:33:39:54:51:57:ca:c2:13:0d:97:
                    f8:3c:1e:70:7c:03:14:e9:23:4d:b3:1d:84:d4:36:
                    ac:ce:18:32:11:ad:eb:ac:3e:ff:12:a9:9d:fd:e3:
                    81:88:67:dd:23:f6:db:7d:6e:8b:af:3d:62:2b:05:
                    0d:a1:89:41:7f:0c:3c:1f:fa:0f:2b:24:3f:64:1f:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:AF:06:11:6B:E7:18:59:77:B0:E4:2C:C3:53:84:43:58:EB:47
            X509v3 Authority Key Identifier:
                keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:32:72:7c:8f:16:f6:b3:18:14:6e:e8:b1:fb:e5:c1:a5:
         a2:33:f6:f5:03:1f:99:c1:c5:d1:ea:c5:3b:78:a7:63:a3:c4:
         8a:b9:32:55:7b:ef:f4:7a:84:e8:dc:f9:2f:b2:6e:9a:01:cf:
         10:d6:89:c7:59:c6:e2:9b:42:09:59:28:ac:b6:16:a4:1a:3a:
         e7:90:10:8a:2d:7e:cb:b2:a9:c1:6d:6c:e4:4d:12:1a:6c:17:
         b9:e0:cd:fe:fb:38:97:e0:98:4d:68:96:2f:90:24:9b:18:86:
         c4:b9:fe:e4:4f:e1:63:71:c0:17:c2:10:d1:6e:28:11:6e:7b:
         be:31:c9:bc:dd:64:3c:d7:78:66:1c:5a:4a:d6:ae:79:18:29:
         47:8e:29:b7:fc:2c:a3:a3:a1:66:0d:9a:f7:64:c5:76:2e:96:
         37:c4:f7:24:2c:7b:35:35:df:68:5a:9e:95:e1:02:74:d4:cc:
         5a:00:b6:48:ba:ca:08:f4:2c:1b:b6:d0:c0:f2:7f:98:28:e5:
         f4:f2:3b:52:51:45:4a:d1:2a:65:e1:a6:ab:1f:42:78:cf:6f:
         c8:ac:32:4f:8b:a3:7a:66:61:11:cd:1d:9d:a5:22:18:0f:81:
         32:d4:af:fe:54:b2:18:fa:1f:dd:5c:fd:39:9b:e2:3e:01:f7:
         2a:45:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:41 2025 by rpki-client